Tag Info

New answers tagged

2

Check the properties of two files C:\Windows\System32\dnsapi.dll and C:\Windows\SysWOW64\dnsapi.dll, if you find they have a "Date modified" around about the time you got the infection then those files are infected and you need to replace them with uninfected versions. The infection does not change other properties like file size and version, you can only ...


0

An intrusion prevention system on the network layer is one approach, AV scanning in a (reverse) proxy another. A common approach is that you apply restrictions on allowed file-name extensions client side before accepting the upload, (but that is hardly fool proof and easily circumvented) and then server-side a quick check to verify if indeed the upload is ...



Top 50 recent answers are included